🎄 Happy Holidays! 🥳

Most of Solace is closed December 24–January 1 so our employees can spend time with their families. We will re-open Thursday, January 2, 2024. Please expect slower response times during this period and open a support ticket for anything needing immediate assistance.

Happy Holidays!

Please note: most of Solace is closed December 25–January 2, and will re-open Tuesday, January 3, 2023.

Connection State Problem

MDK101
MDK101 Member Posts: 5
edited August 2022 in PubSub+ Event Broker #1

Hello Community,

While we are trying to move our setup from centos to ubuntu as host vm, together with docker setup, we are trying to solve the folloing error:


Connection State:   Down (Local SSL handshake failed: Server certificate verification failed: path length constraint exceeded solace


That message is shown on an edge broker, trying to connect to core.

Are there any solutions?

Thank you.

Tagged:

Best Answer

  • MDK101
    MDK101 Member Posts: 5
    #2 Answer ✓

    Hi Marc,

    thanks for your answer. Our Problem was caused by an incorrect cert chain of trust, which has been enforced as enabled setting by most recent solace pub sub broker software versions (somewhere after 9.12.0.17 )

    Kind regards.

Answers

  • marc
    marc Member, Administrator, Moderator, Employee Posts: 963 admin
    edited September 2022 #3

    Hi @MDK101,

    Can you elaborate some more on this? Is this the connection state of a static VPN bridge from one broker to another? or sonmething else? And how many levels are in your certificates? I see this in the docs under Managing Server Certs

    The single server certificate file set for the event broker can have a maximum chain depth of three (that is, the single certificate file can contain up to three certificates in a chain that can be used for the certificate verification).


  • MDK101
    MDK101 Member Posts: 5
    #4 Answer ✓

    Hi Marc,

    thanks for your answer. Our Problem was caused by an incorrect cert chain of trust, which has been enforced as enabled setting by most recent solace pub sub broker software versions (somewhere after 9.12.0.17 )

    Kind regards.

  • marc
    marc Member, Administrator, Moderator, Employee Posts: 963 admin

    Thanks @MDK101, glad you figure it out!